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DETAILED ACTION 
Response to Arguments 

Applicant's arguments filed 9/18/09 have been fully considered but they are not 
persuasive. 

Regarding applicant's argument for claim 45 that Debry does not teach the newly 
amended feature of determining the enablement of deleting a job based upon the first 
decryption results corresponding to the second decryption results, examiner disagrees. 
While Choudhury is cited as teaching the first decryption step, the addition of the Debry 
forms a combination that uses the broad system set-up of Choudhury (directory server 
being separate from the information processing apparatus) to implement a public/private 
key decryption scheme with an access list of clients that lists privileges (access list 
column 9, lines 27-35 of Debry). Debry details a method (column 9, lines 5-35) of using 
access tickets to ensure the correct identity of a user of a system in order to determine 
the privileges associated with the user according to the access list. So a first decryption 
step (which is also taught by Choudhury) in Debry could be the print job fetching 
detailed in column 8, line 50 — column 9, line 4, which is accomplished through a key 
checked against a user identity. Then a second decryption step is performed (column 
9, lines 5-35) as detailed, upon other communications containing access tickets such as 
deleting a job (line 33) where the digital certificate key is compared with the same user 
identity as the first decryption step above to determine what privileges a specific user 
has. Hence, if a user such as the operator on line 33 has registered a print job with a 
first certificate, and then wishes to delete that print job with a second certificate the 
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identities of tlie two certificates must matcli (and are tlierefore compared witli eacli 
otiier) in order for tlie command to be allowed by the system of Debry, if the second 
certificate did not match the identity of the user (such as one of the "end users" in the 
example) then the privilege of deletion would not be enabled in the access control list. 
Therefore the new limitation is taught. 

Regarding applicant's similar argument for claim 52, examiner disagrees on the 
same grounds as detailed above. Van Buren also functions based upon an access list 
(column 6, line 41), and the user (and password) must be the same for both the 
submission of printing operation (the first step) and the deletion of the job (the second 
step), and are thereby compared. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the phor art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1) Claims 45, 48 and 51 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. patent 5,509,074 by Choudhury et al., and further in view of U.S. patent 
6,385,728 by Debry. 

2) Regarding claims 45, 48 and 51 , Choudhury teaches a method of controlling 
peripheral equipment connected to a network and managed by a directory server (figure 
2, item 107) on the network, said method comprising: a first step of receiving a print job 
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issued from an information processing apparatus (column 4, lines 19-22; "processing 
apparatus" is the document server) on the network together with a first access ticket 
issued from the directory server (column 4, lines 13-15 and 29-31 ; "directory server" is 
the copyright server and the access ticket is the unique identification number) with the 
directory server being separate from the information processing apparatus (figure 2, 
document server and copyright server are separate); a storing step of storing the print 
job received in said first receiving step in a storing medium (column 4, lines 7-10; printer 
inherently has hardware as mentioned to be able to decrypt a job, this hardware would 
necessarily include some type of memory to hold the description algorithm as well as 
the job as it is being decrypted); a first decrypting step of decrypting the first access 
ticket received together with the print job in said first receiving step (column 4, lines 25- 
26); a first control step of determining validity of the first access ticket received in said 
first receiving step based on a decrypting result of said first decrypting step and limiting 
execution of the print job received in said first receiving step (column 4, lines 25-31; if 
the identification is incorrect then a job cannot be printed and therefore the execution is 
limited to someone with the correct identification number). 

Choudhury does not specifically teach a second receiving step of receiving a 
management command from an information processing apparatus on the network 
together with a second access ticket issued from the directory server, at timing 
independent of said first receiving step, with the directory server being separate from 
the information processing apparatus; a second decrypting step of decrypting the 
second access ticket received together with the management command in the second 
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receiving step; a second control step of determining validity of the second access ticket 
received in said second receiving step based on a decrypting result of said second 
decrypting step and limiting execution; wherein in the case where the management 
command received in said second receiving step is one for deleting a specific print job 
stored in the storing medium, said second control step compares user information in the 
decryption result of said second decrypting step with the user information in the 
decryption result of said first decrypting step and limits execution of deleting the 
specified print job in the storing medium if the user information in the decryption results 
of said second decrypting step does not correspond to the user information in the 
decryption results of said first decrypting step and enables execution of deleting the 
specified print job in the storing medium if the user information in the decryption results 
of said second decrypting step corresponds to the user information in the first 
decryption results of said first decrypting step. 

Debry teaches a second receiving step of receiving a management command 
from an information processing apparatus on the network together with a second 
access ticket issued from the directory server (column 9, lines 28-35; commands such 
as deleting a job), at timing independent of said first receiving step, with the directory 
server being separate from the information processing apparatus (figure 4; certificate 
authority server, item 60, is separate from the user, item 20); a second decrypting step 
of decrypting the second access ticket received together with the management 
command in the second receiving step; a second control step of determining validity of 
the second access ticket received in said second receiving step based on a decrypting 
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result of said second decrypting step and limiting execution (column 9, lines 15-26; 
access is determined by the public key method, execution is limited according to the 
"access control list"); wherein in the case where the management command received in 
said second receiving step is one for deleting a specific print job stored in the storing 
medium, said second control step compares user information in the decryption result of 
said second decrypting step with the user information in the decryption result of said 
first decrypting step and limits execution of deleting the specified print job in the storing 
medium if the user information in the decryption results of said second decrypting step 
does not correspond to the user information in the decryption results of said first 
decrypting step and enables execution of deleting the specified print job in the storing 
medium if the user information in the decryption results of said second decrypting step 
corresponds to the user information in the first decryption results of said first decrypting 
step (column 9, lines 28-35; access control list is checked and depending upon the 
user's authority a deletion may be executed or prohibited, comparison is performed as 
explained in the arguments above). 

Choudhury and Debry are combinable because they are both from the secure 
printing field of endeavor. 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine Choudhury with Debry to add a management 
command. The motivation for doing so would have been so that "the document may be 
protected from being accessed by anyone other that those users that have access 
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privileges" (column 4, lines 47-49). Therefore it would have been obvious to combine 
Choudhury and Debry to obtain the invention of claims 45, 48 and 51 . 

3) Claims 46 and 49 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. patent 5,509,074 by Choudhury et al., and further in view of U.S. patent 
6,385,728 by Debry, and further in view of U.S. patent 5,81 9,047 by Bauer et al. 

4) Regarding claims 46 and 49, Choudhury does not specifically teach a method 
according to claim 45, wherein the decrypting result of said first decrypting step includes 
information about a permitted number of prints. 

Bauer teaches a method according to claim 45, wherein the decrypting result of 
said first decrypting step includes information about a permitted number of prints 
(Column 4, lines 40-58). 

Choudhury and Bauer are combinable because both are from the printing field of 
endeavor. 

It would have been obvious for a person of ordinary skill in the art at the time the 
invention was made to combine Choudhury with Bauer to add a print quota. The 
motivation for doing so would have been to "provide a simplified way of controlling 
usage of resources of a networked computing system" (Column 2, lines 56-57). 
Therefore it would have been obvious to combine Choudhury with Bauer to obtain the 
invention as specified by claims 46 and 49. 
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5) Claims 47 and 50 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. patent 5,509,074 by Choudhury et al., and further in view of U.S. patent 
6,385,728 by Debry as applied to claims 45 and 48 above, and further in view of U.S. 
patent 6,762,853 by Takagi et al. 

6) Regarding claims 47 and 50, Choudhury does not specifically teach a method 
wherein the management command received in said second receiving step is one for 
displaying a job list, said second control step changes a display for of the job list based 
on the decryption result of said second decrypting step. 

Takagi teaches a method wherein the management command received in said 
second receiving step is one for displaying a job list, said second control step changes a 
display for of the job list based on the decryption result of said second decrypting step 
(figures 8 and 9; column 6, lines 5-14). 

Choudhury and Takagi are combinable because they are both from the secure 
printing field of endeavor. 

It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine Choudhury with Takagi to add display of a users jobs. 
The motivation for doing so would have been user privacy. Therefore it would have 
been obvious to combine Choudhury and Takagi to obtain the invention of claims 47 
and 50. 
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7) Claims 52-54 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
U.S. patent 5,509,074 by Choudhury et al., and further in view of U.S. patent 6,667,81 6 
by Van Buren et al. 

Regarding claims 52-54, Choudhury teaches a method of controlling peripheral 
equipment connected to a network and managed by a directory server (figure 2, item 
107) on the network, said method comprising: a first step of receiving a print job issued 
from an information processing apparatus (column 4, lines 19-22; "processing 
apparatus" is the document server) on the network together with an access ticket issued 
from the directory server (column 4, lines 13-15 and 29-31; "directory server" is the 
copyright server and the access ticket is the unique identification number) with the 
directory server being separate from the information processing apparatus (figure 2, 
document server and copyright server are separate); a storing step of storing the print 
job received in said first receiving step in a storing medium (column 4, lines 7-10; printer 
inherently has hardware as mentioned to be able to decrypt a job, this hardware would 
necessarily include some type of memory to hold the description algorithm as well as 
the job as it is being decrypted); a first decrypting step of decrypting the access ticket 
received together with the print job in said first receiving step (column 4, lines 25-26); a 
first control step of determining validity of the access ticket received in said first 
receiving step based on a decrypting result of said first decrypting step and limiting 
execution of the print job received in said first receiving step (column 4, lines 25-31; if 
the identification is incorrect then a job cannot be printed and therefore the execution is 
limited to someone with the correct identification number). 
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Choudhury does not specifically teach an obtaining step of obtaining, from the 
directory server, access information corresponding to a specific user; an inputting step 
of inputting a management command from an operation panel of the printer; a second 
control step of determining validity of the access information obtained in said obtaining 
step and limiting execution of the management command, wherein in the case where 
the management command inputted in said inputting step is one for deleting a specific 
print job stored in the storing medium, said second control step compares user 
information in the access information with user information in the decryption result of 
said decrypting step and limits execution of deleting the specific print job in the storing 
medium if the user information in the access information does not correspond to the 
user information in the decryption results of said first decrypting step and enables 
execution of deleting the specified print job in the storing medium if the user information 
in the access information corresponds to the user information in the decryption results 
of said first decrypting step. 

Van Buren teaches an obtaining step of obtaining, from the directory server, 
access information corresponding to a specific user; an inputting step of inputting a 
management command from an operation panel of the printer (Column 6, lines 10-14); 
a second control step of determining validity of the access information obtained in said 
obtaining step and limiting execution of the management command (Column 6, lines 40- 
44), wherein in the case where the management command inputted in said inputting 
step is one for deleting a specific print job stored in the storing medium, said second 
control step compares user information in the access information with user information 
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in tlie decryption result of said decrypting step and limits execution of deleting the 
specific print job in the storing medium if the user information in the access information 
does not correspond to the user information in the decryption results of said first 
decrypting step and enables execution of deleting the specified print job in the storing 
medium if the user information in the access information corresponds to the user 
information in the decryption results of said first decrypting step (Column 7, lines 1-8, 
comparison is taught as detailed above in the arguments). 

Choudhury and Van Buren are combinable because both are from the printing 
field of endeavor. 

It would have been obvious for a person of ordinary skill in the art at the time the 
invention was made to combine Choudhury with Van Buren to add inputting a deletion 
command at the printing device interface. The motivation for doing so would have been 
so that "management commands" can be executed "only on command from the 
operator control unit (printer interface)" (Abstract). Therefore it would have been 
obvious to combine Choudhury with Van Buren to obtain the invention as specified by 
claims 52-54. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 
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A shortened statutory period for reply to tin is final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BENJAMIN O. DULANEY whose telephone number is 
(571)272-2874. The examiner can normally be reached on Monday - Friday (10am - 
6pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David Moore can be reached on (571)272-7437. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding tlie status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Benjamin O Dulaney/ 
Examiner, Art Unit 2625 



/David K Moore/ 

Supervisory Patent Examiner, Art Unit 2625 



